diff options
| author | Marc Alexander <admin@m-a-styles.de> | 2014-10-22 14:54:55 -0500 |
|---|---|---|
| committer | Marc Alexander <admin@m-a-styles.de> | 2014-10-22 14:54:55 -0500 |
| commit | 0bc04a4df098da1fd8fe6e272ebf877ae15b7032 (patch) | |
| tree | 8a71d60ef5bee7092c97c2faaab33a8340d1348b /phpBB/phpbb/passwords/driver/sha1_wcf1.php | |
| parent | 2b47ef1266a04ae0bf692a1568687968e8e2b827 (diff) | |
| download | forums-0bc04a4df098da1fd8fe6e272ebf877ae15b7032.tar forums-0bc04a4df098da1fd8fe6e272ebf877ae15b7032.tar.gz forums-0bc04a4df098da1fd8fe6e272ebf877ae15b7032.tar.bz2 forums-0bc04a4df098da1fd8fe6e272ebf877ae15b7032.tar.xz forums-0bc04a4df098da1fd8fe6e272ebf877ae15b7032.zip | |
[ticket/13203] Use string_compare method in passwords drivers
PHPBB3-13203
Diffstat (limited to 'phpBB/phpbb/passwords/driver/sha1_wcf1.php')
| -rw-r--r-- | phpBB/phpbb/passwords/driver/sha1_wcf1.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/phpBB/phpbb/passwords/driver/sha1_wcf1.php b/phpBB/phpbb/passwords/driver/sha1_wcf1.php index 919fa2bb71..68006486c4 100644 --- a/phpBB/phpbb/passwords/driver/sha1_wcf1.php +++ b/phpBB/phpbb/passwords/driver/sha1_wcf1.php @@ -54,7 +54,7 @@ class sha1_wcf1 extends base else { // Works for standard WCF 1.x, i.e. WBB3 and similar - return $hash === sha1($user_row['user_passwd_salt'] . sha1($user_row['user_passwd_salt'] . sha1($password))); + return $this->helper->string_compare($hash, sha1($user_row['user_passwd_salt'] . sha1($user_row['user_passwd_salt'] . sha1($password)))); } } } |